Galen Heath - Security Engineer (Hybrid)

Job Description

Number of Needs: One (1)

Hybrid with onsite 2-3 days.

Location Address: 3050 Terra Crossing Blvd, Louisville, KY 40245

Shift : M-F, 8:30 – 5:30 (1 hr. lunch). Potential on-call support 

What are the desired traits/experiences that the Manager would most like to see?

1. Technical Expertise in Security: Proficiency in threat detection and vulnerability assessments, as well as implementing security tools like SIEM, firewalls, and IDS/IPS systems.

2. Problem-Solving Skills: Proven ability to troubleshoot and resolve complex Network issues under pressure.

3. Risk Management and Incident Response: Experience in conducting risk analyses, responding to security incidents, and developing mitigation strategies.

4. Compliance and Best Practices: Strong understanding of industry standards (e.g., ISO 27001, NIST, PCI DSS) and the ability to ensure systems align with regulatory requirements.

Position Description

Security Engineer

Supervisor: Operations Manager

Department: Information Technology

Position Goal: This position is responsible for day-to-day security support, ticketing, and monitoring of the Galen network, employees and students accounts and email. This position is responsible for discovering security issues and vulnerabilities on a continuous basis. They aggressively look for security issues and track phishing attempts. This position monitors traffic from blocked countries and looks for attempted VPN access from said blocked countries. This position will assist the network team with implementation of network security throughout the Galen environment and monitor notifications and alerts, take action, and report to leadership.

Position Responsibilities:

• Use a variety of methods to discover security issues and vulnerabilities on a continuous basis
• Keep up with security vulnerabilities related to the applications, software and devices used in the organization
• Develop remediations plans and research possible solutions for identified security issues
• Assist in the development and implementation of security best practices, security hardening guidelines and other needed security measures.
• Review security requests submitted by other teams in the organization and determine if they can be implemented securely and what security controls are needed to reduce the risk to the organization.
• Assist the network team with implementation of network security throughout the Galen environment.
• Work with the network team in configuring and on-going maintenance of firewalls.
• Assist in addressing any security alerts and responding to any security events or incidents
• Perform some security analyst duties as needed
• Help conduct risk and security assessments throughout the organization.
• Perform threat hunting utilizing available security hunting tools and techniques
• Evaluate new security technology and measures to see if they would reduce risk to the organization and how they might work in furthering a zero-trust environment.
• Perform basic red teaming and pen testing services within the Galen environment as part of the methodology that will be used in discovering security issues
• Perform support and consulting services related to security issues within the organization.
• Assist in the evaluation of dev ops and cloud security.
• Assist with security awareness activities
• Other duties as assigned by the Cybersecurity Manager

Position Requirements:

• Knowledge and experience of basic security technology and solutions
• Knowledge of networking and network security
• Understanding of Windows OS, Windows Servers, and Linux
• Basic knowledge and understand of Active Directory and Azure AD
• Experience with security systems
• Knowledge of zero trust principles.
• Understanding of security best practices
• Understanding of web related technologies, web applications and services.
• Basic coding/scripting skills – bash, PowerShell and/or python
• Strong problem-solving skills and can work under pressure. Is organized and detail oriented.
• Good communications skills – verbal and written
• Can work independently and is self-motivated and loves to learn new things and is lifelong learner
• Dependable, trustworthy, and work well in a team environment

Education: Bachelor’s degree in the security field is a plus but not required.

Experience: Minimum two years of experience either in a security or networking position

Special Qualifications: Security certifications are a plus, Net+, Security+, or higher

Physical/Mental Demands & Work Environment: Standard 8-5 work week; Able to work outside normal business hours when needed, some weekend work when needed.

Degree of Supervision: Minimal

Health Requirements:None